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ABSTRACT Current research toward real-time fault diagnosis for propulsion systems at the 
National Aeronautics and Space Administration's Lewis Research Center is described. The 
research Is being applied to both airbreathing and rocket propulsion systems. Topics include fault 
detection methods including neural networks, system modeling, and real-time implementations. 


INTRODUCTION 

Motivated by the need for high performance and high 
reliability aerospace and nuclear power generation systems, many 
methods have been investigated lor improved fault detection. In 
this paper the topic of discussion is restricted to real-time fault 
detection where real-time Is dellned by the interaction ol the fault 
detection logic with control accommodation. Much of the literature 
In real-time fault detection ha9 been directed to sensors and 
actuators and has been summarized by Frank'. Additionally, fault 
detection research specifically directed to propulsion systems has 
been summarized by Merrill 2 . 

This paper describes current research toward real-time fault 
diagnosis for propulsion systems at the National Aeronautics and 
Space Administration’s Lewis Research Center. This research is 
of Importance because an analytically-based redundancy approach 
can result In substantial control system cost and weight savings 
over a hardware-based redundancy approach In a high 
performance propulsion system. Research with applications to 
both airbreathing and rocket propulsion systems are discussed. In 
particular, this paper first discusses the results of a program 3 to 
detect sensor faults In a high-performance turbofan engine using an 
advanced algorithm based on analytical redundancy. Next a 
program to Integrate traditional rocket control concepts with real- 
time fault diagnostic capabilities 4 Is described. 

SENSOR FAULT DETECTION 

The objective of the Advanced Detection, Isolation, and 
Accommodatlon(ADlA) program was to Improve demonstrated 
reliability of digital electronic control systems for turbine engines by 
detecting, isolating, and accommodating sensor faults using 
analytical redundancy methods. The ADIA program was organized 
Into four phases: development, Implementation, evaluation, and 
demonstration. In the first three phases the algorithm was 
designed using advanced filtering and detection methodologies, 
Implemented In microprocessor based hardware, and evaluated 
using a real-time engine simulation running on a hybrid computer. 
In the fourth phase the algorithm was demonstrated on a full scale 
FI 00 engine in the Lewis Research Center altitude test facility. The 
lest objective was to demonstrate the predicted performance of the 
ADIA algorithm on realistic hardware over a wide range of engine 
operating conditions. These conditions included altitude, Mach 
number, and power variations. 

Algorithm Description 

The ADIA algorithm detects, Isolates, and accommodates 
sensor faults In an FI 00 turbofan engine control system. The 
algorithm Incorporates advanced filtering and detection logic and Is 
general enough to be applied to different engines or other type3 of 
control systems. The algorithm detects two classes of sensor 
faults, hard and soft. Hard faults were defined as out-of-range or 
large bias errors that occur ’Instantaneously" In the sensed values. 
Soft faults were defined as small bias errors or drift errors that 
Increase relatively slowly with time. The ADIA algorithm of Figure 1 
consists of four elements: (1) hard sensor fault detection and 
isolation logic; (2) soft sensor fault detection and Isolation logic; (3) 
an accommodation filter; and (4) the switch matrix. 

In the normal or unfalled mode of operation, the 
accommodation filter uses the full set of engine measurements to 
generate a set of optimal estimates of the measurements. These 
estima1es(Z(t)) were used by the control law. When a sensor fault 
occurs, the detection logic determines that a fault has occurred. 
The isolation logic then determines which sensor Is faulty. This 
structural Information is passed to the accommodation filter. The 


accommodation filter now removes the faulty measurement Irom 
further consideration. The accommodation filter, however, 
continues to generate the full set of optimal estimates for the 
control. Thus the control mode does not have to restructure for any 
sensor fault. The ADIA algorithm Inputs as shown In Figure 1 were 
Ihe sensed engine output variables, ZJt), and the sensed engine 
Input variables, U m (t). The outputs of the algorithm, the estimates, 
Z{1), of the measured engine outputs, ZJt), were used as Input to 
the proportional part of Ihe control. During normal mode operation, 
engine measurements were used In the Integral control to ensure 
accurate steady-state operation. When a sensor fault Is 
accommodated, the measurement In the Integral control Is replaced 
with the corresponding accommodation filter estimate by 
reconfiguring the Interface switch matrix. 

Accommodation Filter. The accommodation filter 

Incorporates an engine model along with a Kalman gain update to 
generate estimates of the engine states X and the engine outputs 
Z as follows. 

X - F{X - X b ) ♦ G{U - U b ) + Ke 0) 

Z- H{X- X b ) . D(U - U„) . Z„ (2) 

e - Z„ - Z (3) 

Here the subscript b represents the base polnt(steady-state engine 
operating point) and X Is the model state vector, U m the sensed 
control vector, and Is the sensed output vector. The matrix K Is 
the Kalman gain matrix and e Is the residual vector. The F, G, H. 
and D matrices were the appropriately dimensioned model system 
matrices. Their Individual matrix elements along with ihose of K 
were corrected by the engine Inlet conditions E„, and scheduled as 
nonlinear functions of Z*. These nonlinear functions allow 
continuous correction of the model parameters throughout the flight 
regime. This filter structure Is the structure used In the 
accommodation filter and all Ihe hypothesis filters used in the soft 
detection and Isolation logic. Reconfiguration of the 
accommodation filter after the detection and Isolation of a sensor 
fault was accomplished by forcing the appropriate residual element 
to zero. The residuals generated by the accommodation filter were 
used in the hard fault detection logic. 

Hard Fault Detection and Isolation Lode. The hard sensor 
fault detection and Isolation logic is straightforward. To accomplish 
hard fault detection and Isolation the absolute value of each 
component of the residual vector was compared to its own 
threshold. If the residual absolute value was greater than the 
threshold, then a fault was detected and Isolated for the sensor 
corresponding to the residual element. Threshold sizes were based 
on the standard deviation of the noise on the sensors. 

Soft Fault Detection and Isolation Logic. The soft fault 
detection logic consists of multiple-hypothesis-based testing. Each 
hypothesis was Implemented using a Kalman filter. The soft fault 
deteclion/isolatlon logic structure Is shown In Figure 2. A total of six 
hypothesis filters are shown, one for normal mode operation (H e ) 
and five for the fault modes(one for each engine output sensor, H,- 
H 5 ). The structure for each hypothesis filter was identical to the 
accommodation filter{Eqs. (1) to (3)). However, each hypothesis 
filter uses a different, reduced set of measurements. For example 
the first hypothesis filter(H,) uses all of the sensed engine outputs 
except the first, N1. The second uses all of the sensed outputs 
except the second, N2, and so on. Thus, each hypothesis filter 
generates a unique residual vector, e,. From this residual each 
hypothesis filter generates a statistic or likelihood based upon a 
Weighted Sum of Squared Residuals(WSSR). Assuming Gaussian 
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sensor noise, each sample or c, has a certain likelihood or 
probability p, given by 

*•'"*■* (4) 

where k Is a constant and WSSR, - with E * dlag(o*). Here 
T denotes matrix transposition and o, are the sensor noise standard 
deviations. These standard deviation values scale the residuals to 
dimensionless quantities that can be summed to form a WSSR. 
The WSSR statistic was smoothed to remove gross noise effects 
by a first order fag with a time constant of .1 sec. Mathematically, 
when the log of the ratio of likelihoods is taken, then 

LR, = log ( ~ ) - WSS^j - WSSR, (5) 

*-o 

If the maximum LR, exceeds the soft fault detection and isolation 
threshold, then a fault is detected and isolated, and accommodation 
occurs. If a sensor fault has occurred In N1 for example, al! of the 
hypothesis filters except H, will be corrupted by the faulty 
Information. Thus each LR, will be small except for LR,. Thus, LR, 
will be the maximum and It win be compared to the threshold to 
detect the fault. 

Adaptive Threshold. Initially, the soft fault 
deteclion/lsotation threshold was determined by standard statistical 
analysis of the residuals to set the confidence level of false alarms 
and missed detections. Next, the threshold was modified to 
account for modeling error by simulation analysis. It was soon 
apparent from initial evaluation studies that transient modeling error 
was dominant in determining the fixed threshold level, It was also 
clear that this threshold was too large for desirable steady state 
operation. Thus, an adaptive threshold was Incorporated to make 
the algorithm more robust to transient modeling error while 
maintaining steady -state performance. The adaptive 

threshold was heuristically determined and consists of two parts. 
One part is the steady-state detection/isolation threshold which 
accounts for steady-state, or low frequency modeling error. The 
second part accounts for the transient, or high frequency modeling 
error. The adaptive threshold expansion logic enabled the 
threshold steady-state value to be reduced to 40 percent of Its 
original value which results In an 80 percent reduction In the 
detectlon/tsolatlon threshold in steady-state. The adaptive threshold 
logic Is illustrated In Figure 3 for a PLA pulse transient. 

Fault Accommodation. For accommodation two separate 
steps were taken. First, all seven of the flltersfthe accommodation 
filter and the six hypothesis filters) were reconfigured to remove the 
failed sensor from further use in the filters. Second, If a soft fault 
was delected, the states and estimates of ail seven filters were 
updated to the values of the hypothesis filler which corresponds to 
the failed sensor. 

Detection/Accommodation Performance 

The criteria used to evaluate detection, Isolation, and 
accommodation performance were: (1) minimum detectable bias 
values and drift rates, {2) elapsed time between sensor fault and 
detection, (3) steady-state performance degradation after fault 
accommodation, and (4) transient response of the engine to the 
filter and control reconfiguration resulting from fault 

accommodation. In the engine test sensor faults were Injected 
directly Into the control feedback signal and consequently effected 
engine operation until detection and accommodation. The engine 
studied was a full scale, high performance, turbofan engine. The 
engine was tested In an altitude facility over a wide range of 
operating conditions. Two general fault types were studied, hard 
and soft sensor faults. 

The first type of sensor fault considered in the 
demonstration testing was a hard fault. Because hard faults are 
easily detected, they were examined at only one operating 
condition, 10 000 ft/Mach 0.6. The ADIA algorithm exhibited 
excellent hard detection performance at this condition. 

The chosen engine performance measure, engine pressure 
rallo(EPR), Is almost linearly related to engine thrust. The change 
In EPR following the accommodated hard sensor fault was used as 
a measure of accommodation performance. Here the percent 
change In engine pressure ratlo(EPR) 

( 6) 

where EPR rt> Is the sleady-state engine pressure ratio before the 
fault and EPR rF Is the steady-state EPR after the fault. Is defined 
to be the change In steady-state engine performance. For thp 


hard fault detection and accommodation experiments, the 5EPR 
results were less than 6 percent In all cases, well below the critical 
level of 10 percenf. In fact most of the performance changes were 
negligible. 

The other type of sensor fault studied was the soft fault. 
Undetected soft sensor faults, although small In magnitude, may 
result In degraded or unsafe engine operation. Because of their 
small size, soft faults were more difficult to detect than hard faults. 
Two sort fault modes were studied, bias and drift. 

The minimum detectable magnitudes of soft sensor bias 
and drift faults were determined for each of the five sensors 
considered at each of the operating points defined In the test 
matrix. The minimum detectable drift magnitudes were determined 
by finding the smallest delectable drift fault such that a fault was 
detected approximately 5 seconds after fault Inception. In general 
there was good agreement between those minimum fault detection 
magnitudes observed fn the test and those predicted by the real- 
time hybrid evaluation. This agreement demonstrates the excellent 
fidelity of the model used in the algorithm and the simulation used 
In the evaluation. 

The times to detection for the soft bias faults were all less 
than .1 sec. The steady-state accommodation performance for this 
class of fault was good. Again percent changes In thrust(EPR) 
were determined for several operating points demonstrating 
subsonic and supersonic operation at military and medium power 
levels. Alt values obtained were well below the 10 percent critical 
level except for operating condition 50 000 ft/Mach 1 .8 results 
which show a 12 percent change in thrust for an exhaust nozzle 
pressure (PT6) sensor fault. 

The steady-state accommodation performance results 
obtained for sensor drift faults were very good with most thrust 
changes being small and with none larger than the 10 percent level. 
Shown In Figure 4 is a fan-speed drift fault at the 30 000-tt/Mach 
0.9 operating condition al medium power. Here, a fan speed (N1) 
drift fault of 150 rpm/sec was Introduced at 1 sec. Detection and 
accommodation occurred at 6.5 sec.{5.5 sec after fault Initiation) 
and the engine required about 4.5 sec to return to a steady 
condition. During this experiment the fan speed and nozzle 
pressure Integral logic was active. The other four output responses 
show good estimation accuracy and relatively smalt transient 
disturbances to the sensor fault accommodation. 

Additionally, detection performance for sequential faults was 
demonstrated. At condition 10 000 fVMach 0.6 six different 
sequences of soft faults were Injected into the test bed system at 
medium power and one was demonstrated at Intermediate power. 
Each of the seven sequences was a different permutation ot the 
five sensors taken four at a time. In each case the algorithm 
successfully detected and accommodated each sensor fault in the 
correct order. These tests demonstrate the ability of the algorithm 
to continue to successfully perform even after most of the sensors 
have failed. 

Finally, a simultaneous soft fault of burner pressure (PT4) 
and PT6(both failed at the same Instant of time) was Injected Into 
the engine system. The algorithm, although not designed for this 
extremely low probability event, successfully detected and 
accommodated this fault scenario. 

Actual Sensor Hardware Fault Detection . During engine 
testing, two unplanned faults of actual sensor hardware were 
detected by the ADIA logic. There were no missed detections of 
sensor hardware faults by the ADIA logic. In the lirsl case the fan 
discharge temperature thermocouple, which was not explicitly 
covered by the ADIA logic, failed. This fault was a hard fault. The 
second sensor hardware fault was associated with the fan turbine 
Intermediate temperature measurement and was a soft fault 
associated with the signal conditioning amplifier for the sensor. In 
each case the algorithm was able to detect the fault. 

Transient Performance . Two power level (PL^) transient 
experiments were used to further demonstrate the successful 
accommodation, or post-fault performance, of sensor faults. The 
first experiment consisted of Injecting, detecting, and 
accommodating a single sensor fault and then commanding a PLA 
pulse transient. Engine performance with this accommodated failed 
sensor was compared to norma! mode engine performance. 
Eighteen of these single fault PLA pulse tests were performed at 5 
different operating points with excellent results. 

The second accommodation performance experiment 
demonstrated the excellent accuracy of the engine model, fn this 
experiment all the engine sensors were failed and accommodated. 
Then, the engine was commanded to respond to a PLA pulse 
transient. For the condition 10 000 ft/Mach 0.6 experiment, Nt and 
PT6 results are shown In Figure 5. Here excellent performance 
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was demonstrated. Little or no overshoot was observed and engine 
steady-state performance was good. This demonstrates the 
capability of safe, predictable engine operation without any sensed 
engine output information over a slightly restricted power range. 
The fluctuations in PT6 at high power were caused by an airflow 
Interaction between the facility and the engine. 

, APIA Summary 

Sensor fault detection and accommodation were 
demonstrated at eleven different operating points which Included 
subsonic and supersonic conditions and medium and high power 
operation. The minimum detectable fault magnitudes represent 
excellent algorithm performance and compare closely to values 
predicted by simulation. Accommodation performance was 
excellent. Transient engine operation over the full power range with 
single sensors failed and accommodated was successfully 
demonstrated. Open loop engine operational engine output 
sensors failed and accommodated) over at least 75 percent of the 
power range was also demonstrated at two different operating 
conditions. Engine operation with only one sensor operational(fan 
speed) was demonstrated at one operating condition. 

The algorithm Is Impiementable in a realistic environment 
and In an update interval consistent with stable engine operation. 
Off-the-shelf microprocessor based hardware and straightforward 
programming procedures, including FORTRAN and floating point 
arithmetic, can be used. Parallel processing was used as an 
effective approach to achieving a real-time Implementation using 
off-the-shelf computer resources. 

INTELLIGENT FAULT DIAGNOSIS 

Intelligent Control Systems (ICS) are defined as those 
control systems which Integrate traditional control concepts with 
real-time fault diagnostic and prognostic capabilities 4 . Currently, the 
Lewis ICS research program Is developing a real-time diagnostic 
capability for reusable rocket engines, specifically the Space Shuttle 
Main Engine (SSME). Here, diagnostics is defined as the detection 
of a fault, the Isolation of the fault to a specific component, and the 
estimation of the severity and likelihood of the fault. Critical engine 
components as well as sensors will be monitored for faults. A 
framework of the ICS, given In Figure 6, clearly shows the 
interaction of the control with the diagnostic subsystems. 
Coordinator subsystems arbitrate the potentially conflicting 
objectives of the life extension control modes, which accommodate 
engine faults, and the overall mission and engine performance 
objectives. The multilevel Implementation architecture for the 
diagnostic system 5 shown In Figure 7 exploits parallelism to 
achieve high data rales at the condition monitoring and fault 
detection layers. Each of the layers will now be described with 
some discussion about current research associated with each of the 
layers. 

1. Sensor Layer 

The Sensor layer includes all of the instrumentation 
required by the diagnostic system. Measurements obtained in this 
layer are communicated to lire Condition Monitoring layer. Efforts 
to develop special purpose sensors for Improved engine diagnostic 
capabilities Is an ongoing research area*. 

2. Condition Monitoring (CM) Layer 

The Condition Monitoring layer in the diagnostic hierarchy 
Is responsible for signal processing, signal conditioning, feature 
extraction, and other necessary data abstraction for decision 
making purposes. The extracted features needed are defined by 
the experts according to the selected fault modes to be detected. 
Typical condition monitoring functions are: trending of a selected 
sensor over a specific time period, FFT processing of bearing 
deflectometer data, and calculation of functions of measurements, 
pump suction specific speed, for example, and model based- 
residual generation 7 . 

3. Fault Mode Detection ( FMD ) Layer 

The Fault Mode Detection layer responds to those 
conditions which Indicate the possibility of a defined fault mode. 
Each detector module attempts to find conditions of a single fault 
mode. The emphasis at this layer Is to minimize missed detections 
even at the possible expense of Increased false alarms. As 
discussed In the next section, the diagnostic expert system (DES) 
layer wijl address eliminating false alarms. Relevant Information 
that will be transferred to the DES layer Includes an estimate of the 
probability and severity of the delected fault mode. 

If several fault modes are extremely similar and 
distinguishing them is either impossible or unnecessary at this 
stage then a single module will be used to find conditions indicating 
the group. Similar fault modes which must be distinguished will be 
resolved by the next layer In the hierarchy. The FMD layer 
contains the first layer of diagnostic knowledge. It uses the 


compressed sensor information obtained from the condition 
monitors to make the first diagnostic detection of fault modes. An 
example fault mode of this module Is Turbine Interstage Seal Wear 
which can be deduced from CM layer outputs: Turbine Discharge 
Temperature, Pump Shaft Speed, Pump Head vs. Flow Coefficient, 
and Rotor Dynamic Instability Indicator. Another example is the 
diagnosis of actuator faults using neural networks*. 

4. Diagnostic Expert System (DES) Layer 

' The diagnostic experl system serves as the high layer 
health monitor. This layer resolves any conflicting reports from the 
fault mode detectors, determines the priorities of the detected fault 
modes, does the health status assessment of the overall system, 
and Issues the status report to the Intelligent coordination control 
layer (see Figure 6). This layer also monitors the dynamic status 
(operating condition) of the system which may play an important 
part In determining engine health. The DES has to gather all the 
Information, including the probability of detection and the severity 
of the detected modes and then decide on the status of the system. 
The probability of the correctness of this decision, as well as the 
severity layer of the fault mode are transmitted to the coordination 
layer. The ICS coordinator, based on current mission status, then 
decides what, If any, accommodation strategy to employ. 

4. a Emergency Logic (EL) subsystem 

It Is recognized that many fault modes will result In rocket 
engine shutdown. Many of these situations require a nearly 
Immediate engine shutdown to prevent further damage to Ihe 
engine. The decentralized functionality and parallelism of the 
expected Implementation of the diagnostic system will provide 
substantial computational throughput. However, to account lor 
those situations where a direct, Irrevocable engine shutdown Is 
required, an Emergency Logic subsystem Is Included in the 
diagnostic syslem. 

Exam ple Diagn ostic System 

As an example of the multilevel diagnostic syslem just 
described, a two level, neural network based architecture has been 
developed to detect and diagnose engine actuator faults In the 
SSME. The two level architecture would be representative of the 
Fault Detection Layer of the diagnostic architecture and would be 
driven by model-based residuals generated at the Condition Monitor 
Layer. The residual generation process Is described first. 

Residual Generation 

Typically, complete nonlinear dynamic simulations of 
propulsion system (SSME) performance are available. However, 
due to their size and complexity (40 min. CPU time for 20 sec. of 
real time operation with a VAX 8800 for the SSME), these nonlinear 
simulations cannot be used to generate residuals In real time to 
describe the normal mode of operation. Alternative approaches, 
such as the finked linear model approach, have been applied to 
accurately, yet simply, model the performance of the SSME*. Here 
a system Identification algorithm and the data generated from the 
nonlinear performance simulation are used to obtain linear models 
of the SSME at twenty five different operating points. The Inputs of 
these models are the rolary motion of the valve actuator outputs of 
the oxidizer preburner oxidizer valve (OPOV), p^^,, and fuel 
preburner oxidizer valve (FPOV), p^y. The models have 
measurable state variables which simplifies the model structure. 
The outputs which are also the state variables, are the chamber 
Inlet pressure, P c , mixture ratio, MR, high pressure fuel turbine 
speed, S HPFT , and high pressure oxidizer turbine speed, S HPOT . The 
linear models, which predict ihe output of the nonlinear simulation 
with very good accuracy, are linked to obtain a simplified, quasl- 
linear model of the SSME, valid within Its full range of operation. 
The coefficients of the linear models are regressed with the 
parameters which determine the nominal operating conditions, 
mixture ratio and the chamber pressure, A comparison of the 
responses of the linked model and the nonlinear simulation indicate 
good agreement as shown In Figure 8. 

With the observed state variables, residuals are generated 
between the measured output and the output oblained using the 
stale-space model as: 

mslduals - < 7 ) 

These residuals are generated by Inducing stuck valve faults In the 
nonlinear dynamic simulation of the SSME. Both the OPOV and the 
FPOV are considered for this purpose. In this paper a stuck fault 
is defined such that a valve may not move above a certain angle, 
called the fault severity. However, Ihe valve may move as 
commanded below this angle. Data are obtained at various stuck 

fault severity angles. Using the residuals generated by the 
Condition Monitoring Layer, a two layer, neural network based 
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architecture has been developed to detect and diagnose engine 
actuator faults. 

Neural Network Architecture 

The Neural Network architecture employed in this study, as 
shown In Figure 9 is a two level architecture: 

1) The Classifier level where the faults are actually 
classified as belonging to a particular category (fault detection); 

2) The Severity level where the severity(magnitude) 
of the fault that was Identified in the Classifier level Is estimated. 

Classifier Level 

The Classifier level consists of two networks, one 
associated with the chamber pressure residual and the other with 
the mixture ratio residual Each of these two networks are three 
layer (including the Input and output layers) feedforward networks 
with non-linear hidden and oulput units. The weighls in these 
networks are assigned using the generalized back propagation 
algorithm. 

Each of these networks consist of 200 input nodes, 20 
hidden nodes and 2 output nodes. The input to one network is a 
time sequence of the chamber pressure residual of length 200. 
The time step between residuals is 0.04 seconds with the total 
sequence lime representing 8 secs. Similarly the other network 
receives the mixture ratio residual sequence as Us Input. For each 
of these two networks, one output node Is associated with the 
OPOV stuck condition while the other output node corresponds to 
the FPOV stuck condition. In short, one output node Is activated If 
an OPOV stuck condition Is activated; the other Is activated If an 
FPOV stuck condition is activated. The oulput activations are real 
numbers between 0 and f . 

Training: 

For network training, six fault scenarios were generated 
from the non-linear dynamic simulation for the following fault 
conditions: 

a) The OPOV valve stuck at 45, 47 and 50 degrees 
respectively. 

b) The FPOV valve stuck at 53, 57 and 59.5 degrees 
respectively. 

Chamber pressure and mixture ratio residuals for these scenarios 
were generated as In Equation (7) for a time span of 8 seconds In 
steps of 0.04 seconds (a 200 length sequence), That Is, the 
residual data are generated as the difference of the actual output 
of the SSME non-linear simulation and the output generated by the 
linked model. 

During training, a residual pattern representing a fault 
condition Is applied 1o the input level (200 nodes) and a t 
(Indicating full activation) is applied to the corresponding output 
node. For instance, the chamber pressure residual corresponding 
to an OPOV stuck valve condition is applied to one of the Classifier 
networks and an activation of 1 is imposed on the output node 
corresponding to the OPOV stuck condition. The network weights 
are then adjusted Invoking the back propagation algorithm, tfius 
enabling Ihe neural network to learn the imposed input-output 
pattern. Each of the Classifier networks Is trained using all six fault 
scenarios. 

Severity Level 

The Severity level consists of four (4) networks, two 
associated with the chamber pressure residual (one for OPOV 
severity and the other for FPOV severity) and the other two with the 
mixture ratio residual. Once again, each of these networks Is a 
three layer feedforward network where the weights are assigned 
using the back propagation algorithm. 

Each of these networks consist of 200 input nodes, 20 
hidden nodes and 3 output nodes. Two of these networks receive 
the chamber pressure residual sequence as its Input, while the 
other two networks receive the mixture ratio residual sequence as 
Its Input. The three output nodes correspond to the three severity 
levels (OPOV stuck at 45, 47 and 50 or FPOV stuck at 53, 57 and 
59.5 degrees). 

Training: 

The training Is similar to that used in the Classifier level. 
Once the Input pattern Is applied to a network, the node 
corresponding to the severity level of the input pattern Is fully 
activated and the network weights learned through back 
propagation. For Instance, the chamber pressure residual, 
corresponding to the 45 degrees OPOV stuck valve fault scenario, 
Is applied as the input and the oulput node corresponding to a 45 
degree severity level Is given an activation of 1 . However, for the 
Severity level networks, only those residual sequences that 
correspond to the appropriate network are used to train the 
network. For example only mixture ratio residual sequences are 
used to train the two mixture ratio severity networks. As a result, 
each of these Severity level networks is trained with three Input 


representations rather than six as In the Classifier level. 

Results 

Test data with severity levels not used in training were used 
to test both the Classifier level and the Severity level networks. 
The network architecture woiks as follows. Consider a fault 
scenario of the OPOV valve stuck at 47.5 degrees. The two 
Classifier level networks use their corresponding Inputs (one uses 
the chamber pressure residual while the other uses the mixture 
ratio residual) to give an output activation corresponding to the fault 
(In this case the oulput node corresponding to the OPOV fault 
condition Is activated in each of these two networks). Figure 10 
Illustrates the result? obtained for this case. 

Once the decision has been made as to what the fault is, 
the Severity level networks are used lo detect the severity of the 
lault. With the OPOV stuck condition, 2 Severity level networks 
swing Into action (each corresponding to one of the two residuals) 
to estimate the severity of the OPOV sluck valve. The other two 
Severity level networks are dormant as they are trained to estimate 
the FPOV fault severity levels. 

Consider another test case for the fault scenario of the 
FPOV valve stuck at 55 degrees. Again the network architecture 
would work as In the previous case with the outputs of the Classifier 
and Severity level networks shown In Figure 11. Nole that In this 
case the network actually approximates the severity level since the 
weighted sum of the oulput activation magnitudes Is 55.5. In both 
cases the networks correctly Identify both the fault types and their 
severity. 

CONCLUSIONS 

This paper discusses some of the ongoing research In fault 
detection and diagnosis for aerospace propulsion systems 
sponsored by the National Aeronautics and Space Administration’s 
Lewis Research Center. The research reported is grouped In two 
general areas, sensor fault delection and intelligent fault diagnosis. 

Sensor fault detection and accommodation for a high 
performance turbofan engine Was demonstrated at eleven different 
operating points which Included subsonic and supersonic conditions 
and medium and high power operation. Excellent detection and 
accommodation performance was shown. Transient engine 
operation over the full power range with single sensors failed and 
accommodated was successfully demonstrated. Open loop engine 
operational engine output sensors failed and accommodated) over 
at least 75 percent of the power range was also demonstrated at 
two different operating conditions. 

In the area of Intellignet fault diagnosis a proposed 
architecture for real-time, decentralized fault diagnosis was 
proposed. Within this four layer architecture research Into model 
based fault detection and diagnosis using neural networks was 
presented. This Included a design of a model based fault detection 
and diagnosis system for the space shuttle main engine. The 
engine is modeled using a discrete time, quasi-linear stale-space 
representation whose model parameters are determined by 
Identification. Residuals generated from the model are used by a 
neural network to detect and diagnose engine component faults. 
Fault diagnosis is accomplished by training the neural network lo 
recognize the pattern of the respective fault signatures. 
Preliminary results obtained from a nonlinear dynamic simulation of 
the space shuttle main engine for two failed oxidizer valve 
scenarios were presented and Indicate that tire developed approach 
can be used for fault detection and diagnosis. Unequivocal 
classifications of fault type were obtained along with accurate 
estimation of fault severity for scenarios not Included in the training 
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Figure 4 Fan speed drift fault detection results 



Figure 1 Advanced failure detection, isolation, and accommodation 
algorithm 
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Figure 2 Soft fault detection and Isolation logic 




Figure 5 Open-loop engine transient response 
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Figure 3 Soft fauft adaptive threshold 



Figure 6 Intelligent Control System framework 
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Figure 7 Real time diagnostic system architecture 
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Figure 8 Linked model accuracy results. 
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Figure 9 Neural network classifier architecture 
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Figure 10 Neural network classifier results for OPOV actuator fault 


Figure 11 Neural network classifier results for FPOV actuator fault 
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